Answers

I discovered the problem. When i run the command gpupdate and gpresult on domain controller i notice that both domain policy and domain controller policy were being applied on the PDC. On Group policy managment i uncheck enforced option to default domain
policy. All problems regarding advertising test disapeared.

TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Standard Edition (Service Pack level: 2.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000010] BASP Virtual Adapter:
MAC address is 00:1B:FC:6B:E6:E6
IP address is static
IP address: 192.168.0.30
DNS servers:
192.168.0.30 (<name unavailable>) [Valid]
192.168.0.2 (<name unavailable>) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found (primary)
Root zone on this DC/DNS server was not found

TEST: Basic (Basc)
Microsoft(R) Windows(R) Server 2003, Standard Edition (Service Pack level: 2.0) is supported
NETLOGON service is running
kdc service is running
DNSCACHE service is running
DNS service is running
DC is a DNS server
Network adapters information:
Adapter [00000007] VMware Accelerated AMD PCNet Adapter:
MAC address is 00:0C:29:CA:91:9B
IP address is static
IP address: 192.168.0.2
DNS servers:
192.168.0.2 (<name unavailable>) [Valid]
192.168.0.30 (<name unavailable>) [Valid]
The A record for this DC was found
The SOA record for the Active Directory zone was found
The Active Directory zone on this DC/DNS server was found (primary)
Root zone on this DC/DNS server was not found

>Warning: DcGetDcName(TIME_SERVER) call failed, error 1355A Time Server could not be located.The server holding the PDC role is down.

According to the report, it seems like that the PDC role is down, please check which DC hold the PDC role. Does the role work fine?

Best Regards,

Yan Li

Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

In my case i have time service configured by group policy, is that a good ideia? I have one configuration on the default domain policy for domain computers and another configuration for domain controllers policy. Domain controllers sync with external source
and domain computers sync with domain controllers. In domain controllers policy its better to have their configuration set to not configured? And then configure by registry?

To me it looks to be all the issues due to time sync issues and yes, if there is a time drift, you will see lot of errors in domain. Make sure Sysvol/netlogon shares are present on the DC and it is accessible. Time service requires port 123 UDP. Checking
the connectivity and firewall port being blocked can be the issue.

Instead of making all the domain controllers to sync with external time resource, make your PDC as authoritative time server.

The PDC operations master at the root of the forest becomes authoritative for the organization.

By default, Windows-based computers use the following hierarchy:

All client desktop computers nominate the authenticating domain controller as their in-bound time partner.

All member servers follow the same process that client desktop computers follow.

All domain controllers in a domain nominate the primary domain controller (PDC) operations master as their in-bound time partner.

All PDC operations masters follow the hierarchy of domains in the selection of their in-bound time partner.

How to configure an authoritative time server in Windows Server
support.microsoft.com/kb/816042

If you found this post helpful, please give it a "Helpful" vote. If it answered your question, remember to mark it as an "Answer". This posting is provided "AS IS" with no warranties and confers no rights! Always test ANY
suggestion in a test environment before implementing!

I discovered the problem. When i run the command gpupdate and gpresult on domain controller i notice that both domain policy and domain controller policy were being applied on the PDC. On Group policy managment i uncheck enforced option to default domain
policy. All problems regarding advertising test disapeared.

Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.